CVE-2026-44059 | THREATINT

Description

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor service disruption.

PUBLISHED Reserved 2026-05-05 | Published 2026-05-21 | Updated 2026-05-21 | Assigner securin

LOW: 3.9CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Problem types

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Product status

Default status

unaffected

2.2.5 (semver)

affected

4.5.0 (semver)

unaffected

Credits

Arjun Basnet from Securin finder

References

netatalk.io/security/CVE-2026-44059 (Netatalk Security Advisory CVE-2026-44059) vendor-advisory

cve.org (CVE-2026-44059)

nvd.nist.gov (CVE-2026-44059)

Download JSON